PUP.Optional.Amigo malicious file

The PUP.Optional.Amigo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.Amigo virus can do?

Presents an Authenticode digital signature
A process attempted to delay the analysis task.
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Creates a hidden or system file
Attempts to modify proxy settings
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

mrds.mail.ru

amigodl.mail.ru

How to determine PUP.Optional.Amigo?


File Info:
crc32: C490F180
md5: 34e0e0fe1a5c95fd8a31da7d0bbdefbc
name: 34E0E0FE1A5C95FD8A31DA7D0BBDEFBC.mlw
sha1: df23d6931988cf08b71cdc7332f60bc1be71699a
sha256: a69e139c37e8ca839325741afd8127dcced7ee41f55530356478cfa3f32278d5
sha512: ba3106d2c300f04af11cf613ccc995ec48eafdb9500f0ea0bfd43b9779e1c91c550226801c7c68a84d5b4ce029f59e04447dac457e007946f9ad4e478d29f395
ssdeep: 6144:3RLp3ES00VdQel2YQjXA3ILzLSto4Gx6dKAOLCma/d3QYwh:3P0SvjQvjXA3GStc6dKFba/d5w
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2015
InternalName: Amigo Mail.Ru
FileVersion: 2.0.0.266
CompanyName: Mail.Ru
ProductName: Amigo@Mail.Ru
ProductVersion: 2.0.0.266
FileDescription: Amigo@Mail.Ru
OriginalFilename: Amigo@Mail.Ru
Translation: 0x0409 0x04b0

PUP.Optional.Amigo also known as:

Cylance	Unsafe
Comodo	Application.Win32.MailRu.BACS@6kp8ua
Sophos	Generic ML PUA (PUA)
Antiy-AVL	Trojan/Win32.TSGeneric
Malwarebytes	PUP.Optional.Amigo
eGambit	Unsafe.AI_Score_98%
CrowdStrike	win/malicious_confidence_60% (D)

How to remove PUP.Optional.Amigo?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

PUP.Optional.Amigo malicious file